Hi Everyone,
I'm new to rampart but learning quickly, well not quikly enough because I've
been having some problems trying to invoke a WS that was made using oracle
tools, is supposed to be easy initialy I just had to sing the message but
even at that level I haven't been able to do it, I went thru examples on the
distribution (1.4.1) and some webs but I'm still getting :
FAULT CODE: UnsupportedSecurityToken FAULT MESSAGE: An unsupported token was
provided
I asked for a successful soap message example to compare the one I generate
with a good one, (attached to the message) the only big diference I see is
that in the rampart made soap message all the URI attributes are not
encripted as they do in the oracle example
Rampart:
...
<ds:Reference URI="#Id-27978063">
..
<ds:Reference URI="#Timestamp-14707008">
....
<wsse:Reference URI="#CertId-1097338"
....
Oracle:
..
<dsig:Reference URI="#bcyKqLafyGSUXDbAEVXbIg22">
...
<dsig:Reference URI="#5KdQ0TRTux484dTYM5mpHQ22">
....
<wsse:Reference URI="#5KdQ0TRTux484dTYM5mpHQ22"
....
What is all about? (I'm really newbie) and how can I match that using
rampart ??
Regards,
Marcus V. Sánchez D.
______________________
Enterprise Developer.
Sun Certified Java Programmer (SCJP)
<?xml version="1.0" encoding="UTF-8"?>
<env:Envelope xmlns:env="http://schemas.xmlsoap.org/soap/envelope/";
xmlns:xsd="http://www.w3.org/2001/XMLSchema";
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
xmlns:ns0="http://test.heinsohn.com/types/";>
<env:Header>
<wsse:Security env:mustUnderstand="1"
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";
xmlns="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";
xmlns:env="http://schemas.xmlsoap.org/soap/envelope/";>
<wsse:BinarySecurityToken
ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3";
EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary";
wsu:Id="5KdQ0TRTux484dTYM5mpHQ22"
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";
xmlns="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";>
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
</wsse:BinarySecurityToken>
<dsig:Signature xmlns="http://www.w3.org/2000/09/xmldsig#";
xmlns:dsig="http://www.w3.org/2000/09/xmldsig#";>
<dsig:SignedInfo>
<dsig:CanonicalizationMethod
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"; />
<dsig:SignatureMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"; />
<dsig:Reference URI="#bcyKqLafyGSUXDbAEVXbIg22">
<dsig:Transforms>
<dsig:Transform
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"; />
</dsig:Transforms>
<dsig:DigestMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"; />
<dsig:DigestValue>
r6mS6ytfF/8Hj5qOfC3Vy8o5n5c=
</dsig:DigestValue>
</dsig:Reference>
<dsig:Reference URI="#5KdQ0TRTux484dTYM5mpHQ22">
<dsig:Transforms>
<dsig:Transform
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"; />
</dsig:Transforms>
<dsig:DigestMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"; />
<dsig:DigestValue>
7g8/vO+zjJNHKyKPpJGhBDRNO8A=
</dsig:DigestValue>
</dsig:Reference>
</dsig:SignedInfo>
<dsig:SignatureValue>
eF1WtunbSIGGMLDEurLqa5QTXoNYbHd0AG9Kg2glQVOZhvFJ0QvmMx3YNPuwbw5x7+lbGjRqSI9eD/EMwXyVAlvMTbMJJsspYoocS/tspTRqxIuKtI72qKIqOaUnXWJDFXocM9nxmqththJuuUf8Dji8+Y1rtHby9WlCh9EWkHI=
</dsig:SignatureValue>
<dsig:KeyInfo>
<wsse:SecurityTokenReference
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";
xmlns="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";>
<wsse:Reference URI="#5KdQ0TRTux484dTYM5mpHQ22"
ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3";
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";
xmlns="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"; />
</wsse:SecurityTokenReference>
</dsig:KeyInfo>
</dsig:Signature>
<wsu:Timestamp
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
xmlns="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";>
<wsu:Created>2009-01-22T21:19:31Z</wsu:Created>
<wsu:Expires>2009-01-23T05:19:31Z</wsu:Expires>
</wsu:Timestamp>
</wsse:Security>
</env:Header>
<env:Body wsu:Id="bcyKqLafyGSUXDbAEVXbIg22"
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";>
<ns0:talkToMeElement />
</env:Body>
</env:Envelope>
<?xml version='1.0' encoding='UTF-8'?>
<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/";>
<soapenv:Header xmlns:wsa="http://www.w3.org/2005/08/addressing";>
<wsse:Security
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";
soapenv:mustUnderstand="1">
<wsu:Timestamp
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
wsu:Id="Timestamp-14707008">
<wsu:Created>2009-01-23T00:15:48.899Z</wsu:Created>
<wsu:Expires>2009-01-23T00:20:48.899Z</wsu:Expires>
</wsu:Timestamp>
<wsse:BinarySecurityToken
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary";
ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v1";
wsu:Id="CertId-1097338">MIICRDCCAa0CBElQ5UwwDQYJKoZIhvcNAQEFBQAwaTELMAkGA1UEBhMCVVMxETAPBgNVBAgTCEZsb3JpZGFkMRAwDgYDVQQHEwdzYW1Ib21lMQ8wDQYDVQQKEwZzYW1PcmcxEDAOBgNVBAsTB3NhbURlcHQxEjAQBgNVBAMTCVNhbSBNb29yZTAeFw0wODEyMjMxMzE5MDhaFw0wOTAzMjMxMzE5MDhaMGkxCzAJBgNVBAYTAlVTMREwDwYDVQQIEwhGbG9yaWRhZDEQMA4GA1UEBxMHc2FtSG9tZTEPMA0GA1UEChMGc2FtT3JnMRAwDgYDVQQLEwdzYW1EZXB0MRIwEAYDVQQDEwlTYW0gTW9vcmUwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAJm/fJrcbHtDbVl6M313XiCnKxbYggQSwOL34kqfjQrbyK6u/cCltmBWPK3EIPsrm8gPoiWBzdMQMnDvPXog5pgloFUck3zB0XfVAavzDC07Ob2zJSKSN3Mh7rgGyq0L5urXeFcwtIVApuIarYz3Dbmx6I0CxpKo3VTsHPJweEh9AgMBAAEwDQYJKoZIhvcNAQEFBQADgYEAEshQamGii5bh2wyBSCSAlV/jENbHMVB+k2AXhZvYT2nKAE0agHp0ELc1D1e6tbPGo77UE6DyXmXivm/WfwHBUZ71KjPNR7kqa7MbGzk2WoyP6vFyxIuk7DinYRYHi6H9jC/gKb0o/p5EDQe94gxkz5jZN3+VXT1vUqPIxGOqOOE=</wsse:BinarySecurityToken>
<ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#";
Id="Signature-20092482">
<ds:SignedInfo>
<ds:CanonicalizationMethod
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"; />
<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"; />
<ds:Reference URI="#Id-27978063">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"; />
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"; />
<ds:DigestValue>gTt0XskTLtSn0BeyICmDc9sC0eI=</ds:DigestValue>
</ds:Reference>
<ds:Reference URI="#Timestamp-14707008">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"; />
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"; />
<ds:DigestValue>c41VcXsX3g6wgX57HnRDWHWgH6s=</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
ZJnytmmle6IJproMk4pBWav/K/08eKKnOS3rXKxm9p4pdJjbR2LQo+PfdML108rw2JQU06HcruaP
cp0CSv7lZZfSi4VIibRlU8smGIzRGsSdItC28jl5lBB0ZXmwWu/kcPfTkA50UqlaRCXy6AeP+km5
hZg3+e5xZgSjEnmROwc= </ds:SignatureValue>
<ds:KeyInfo Id="KeyId-28154095">
<wsse:SecurityTokenReference
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
wsu:Id="STRId-23738549">
<wsse:Reference URI="#CertId-1097338"
ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v1"; />
</wsse:SecurityTokenReference>
</ds:KeyInfo>
</ds:Signature>
</wsse:Security>
<wsa:To>http://localhost:8088/gateway/services/SID0003001</wsa:To>
<wsa:MessageID>urn:uuid:AECDDCE53586EDD65F1232669747468</wsa:MessageID>
<wsa:Action>http://test.heinsohn.com//talkToMe</wsa:Action>
</soapenv:Header>
<soapenv:Body
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
wsu:Id="Id-27978063">
<ns1:talkToMeElement xmlns:ns1="http://test.heinsohn.com/types/"; />
</soapenv:Body>
</soapenv:Envelope>
0
